Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.mft
File: DE8Lml_gOJ-ty7-x-hxAxKS6DSs.mft (raw, json)
Hash identifier: g4t/3JLTLpDga5X5lv2OhfYIGFSgnLfBaL8fNvUOoS0=
Subject key identifier: D9:A1:32:0B:B8:11:A7:92:BF:FF:EB:CA:B3:74:60:D0:99:B6:39:AE
Authority key identifier: 0C:4F:0B:9A:5F:E0:38:9F:AD:CB:BF:B1:FA:1C:40:C4:A4:BA:0D:2B
Certificate issuer: /CN=0c4f0b9a5fe0389fadcbbfb1fa1c40c4a4ba0d2b
Certificate serial: 019749680B3CC97B41FDD358614542938058
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.mft
Manifest number: 1257
Signing time: Sat 07 Jun 2025 08:00:44 +0000
Manifest this update: Sat 07 Jun 2025 08:00:44 +0000
Manifest next update: Sun 08 Jun 2025 08:00:44 +0000
Files and hashes: 1: DE8Lml_gOJ-ty7-x-hxAxKS6DSs.crl (hash: Kywvk69gKMyJdQEbvVfEjJqU378rX+MT7Jkx27TdOHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:0b:3c:c9:7b:41:fd:d3:58:61:45:42:93:80:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c4f0b9a5fe0389fadcbbfb1fa1c40c4a4ba0d2b
Validity
Not Before: Jun 7 08:00:44 2025 GMT
Not After : Jun 8 08:00:44 2025 GMT
Subject: CN=d9a1320bb811a792bfffebcab37460d099b639ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9b:74:b6:c0:74:ae:20:ad:17:f0:cd:11:e2:
c7:e2:d9:ef:c3:4e:83:40:3b:13:02:26:1c:fe:af:
98:a3:8d:1d:dc:b2:f7:26:92:eb:38:0d:fe:20:74:
10:e2:f2:bd:a1:80:eb:03:33:d8:c1:d8:b5:d2:42:
22:44:6c:87:be:91:01:8d:79:24:79:0c:c3:73:0b:
5a:32:e2:e6:ea:72:1c:69:49:72:6b:54:9e:7d:97:
42:d3:69:fb:9e:1f:22:ff:59:fb:1b:52:51:07:48:
63:2d:36:3b:76:63:5b:d4:21:df:db:8f:f1:c0:f1:
9f:16:9b:3f:97:e0:49:4e:38:f0:b6:a9:f1:ad:15:
da:de:90:bc:40:a1:8e:90:74:46:d2:8a:95:49:06:
1c:e2:ad:c3:91:45:ea:0f:b5:3b:e0:29:a9:94:c0:
d5:01:4a:6e:0b:6d:80:42:ea:4c:45:53:58:72:e7:
a8:e9:24:39:56:0c:43:ef:13:0f:44:dd:c9:34:e4:
68:13:43:3d:15:93:74:5d:19:5b:9f:dd:1c:6d:50:
08:af:57:8d:b2:97:12:86:0b:6f:b4:49:df:7e:b4:
0d:1f:96:1f:95:3e:9d:5f:30:0c:7c:9a:86:49:25:
35:09:07:ba:4c:72:79:1a:17:02:b4:22:2b:e5:37:
88:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A1:32:0B:B8:11:A7:92:BF:FF:EB:CA:B3:74:60:D0:99:B6:39:AE
X509v3 Authority Key Identifier:
keyid:0C:4F:0B:9A:5F:E0:38:9F:AD:CB:BF:B1:FA:1C:40:C4:A4:BA:0D:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:7a:7c:c4:cc:ec:1f:df:9d:13:3c:45:7b:82:42:f2:d1:44:
d8:b7:74:a7:07:1d:4d:8c:73:df:78:7d:65:93:f4:d7:b4:8a:
e1:b2:19:61:90:3b:3f:90:1d:b9:1a:8a:b9:48:64:d3:ed:ed:
aa:18:a6:c4:f5:4e:1d:bf:60:db:99:ea:13:c6:eb:e9:22:b2:
93:c5:5a:5a:0d:7b:4a:e9:02:24:87:9f:2f:7c:0a:74:74:a2:
81:c6:e1:8e:66:96:7d:05:a6:cb:68:d4:37:f1:c8:ce:a9:e1:
7f:c0:a2:ad:59:4f:34:12:ba:6e:d5:f2:b5:68:48:82:3c:0c:
ec:32:de:b7:cc:3c:58:1c:2a:f2:8b:eb:ff:7f:65:00:cf:a9:
51:14:b3:14:5e:d4:9c:19:fd:b0:d2:b3:19:61:88:ff:4f:fb:
ee:6b:63:ee:34:20:43:7d:1f:3e:cb:4c:03:2d:99:91:81:33:
43:11:a5:a6:04:c7:33:d1:63:a4:ad:b8:50:46:2b:34:13:f3:
37:a2:f2:6f:df:13:3a:34:55:62:1a:e3:a6:ff:ad:5c:68:21:
96:bf:35:d0:ec:34:c3:7a:6d:52:9a:e1:64:4d:f2:b2:ba:87:
9f:99:da:17:8c:8b:a9:c1:91:70:1d:bb:d3:a8:02:f8:c1:02:
da:35:de:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:13:08 2025 by rpki-client